Tool to extract username and password of current user from PanGPA in plaintext under Windows
Palo Alto Networks GlobalProtect client queries the GlobalProtect Service for your username and password everytime you log on or refresh the connection.
It appears in memory as paintext - same with the uninstall password and deactivate passcode.
This is a PoC to demonstrate the extraction of the username and password. A full write up can be found over at shells.systems
Usage : run the compiled executable. No special privileges required.